CVE-2023-6654

PHPEMS Cookie deserialization vulnerability. Exploiting this vulnerability allows modifying SQL statements through deserialization, and through SQL injection, changing the password or permissions of any existing user. The default administrator account is peadmin.

Fofa fingerprint

app="PHPEMS"

Tool usage

python exp.py -u http://127.0.0.1:1111

-u parameter specifies the URL of PHPEMS

-a parameter specifies the username, defaulting to the PHPEMS default administrator account peadmin

-p parameter specifies the password to modify, defaulting to 123456

-o parameter specifies the option: option 0 modifies the specified account's password; option 1 modifies the specified account's permissions to administrator. By default it modifies the specified account's password, but option 1 is still recommended.

exp:

Disclaimer

Any direct or indirect consequences and losses caused by the dissemination or use of the information provided in this article are the responsibility of the user. The author bears no responsibility for them.